Amendments to the Claims : 

1 . (Currently Amended) A secured communication metho d implemented 
by a server system to secure communications between a service provider and a mobile 
device in - ier-a mobile communications network, the method comprising: 

receiving a request from the mobile device to provide a unique security key-te-a 
mobil e d e vic e conn e ct e d to th e mobil e communications n e twork ; 

generating a unique security key for the requesting mobile device, , in response to 
receiving the request from the mobile device rec e iving a uniqu e id e ntification numb e r 
from th e mobil e d e vic e; 

storing the unique security key in association with an identifier of the mobile 
device in a first data storage mechanism in the server system in association with th e 
uniqu e id e ntification numb e r id e ntifying th e mobil e d e vic e , wh e r e in th e first data storag e 
m e chanism is acc e ssibl e to a s e rv e r syst e m conn e ct e d to th e mobil e d e vic e over a wide 
ar e a communicatoin n e twork, and wh e r e in th e first data storag e m e chanism is not 
dir e ctly acc e ssibl e by th e mobil e d e vic e; 

providing the unique security key to the mobile device, wherein the mobile device 
stores the unique security key in a second data storage mechanism in the mobile device; 

receiving a request from the service provider to provide the unique security key i 
wherein the service provider requests the unique security key in order to establish a 
secure communication session with the mobile device for th e mobil e d e vic e to a s e rvic e 
provider such that the service provider can provide a service to the mobile device based 
on the unique security key ; and 

providing the unique security key to the service provider, in response to 
determining that the service provider is included in a list of approved service providers, 
wherein the list of approved service providers is updatable by the mobile device, and 
wherein the secure communication session is established between the service provider 
and the mobile device, in response to the service provider presenting the unique security 
key to the mobile device for authentication. approving th e r e qu e st to provid e th e uniqu e 



2 



security key to the service provider based on content of a list of service providers stored 
in a second data storage mechanism, 

wh e r e in th e s e cond data storag e m e chanism is dir e ctly acc e ssibl e by th e mobil e 



mobil e d e vic e by way of dir e ctly accessing th e s e cond data storag e m e chanism via th e 
mobile device. 

2. (Currently Amended) The method of claim 1, wherein the list of 
approved service providers is stored in at least one of the first and second data storage 
mechanisms furth e r comprising: 




denying the request to provide the unique security key, if the service provider is 
not approved to receive the unique security key for the mobile device according to the 
cont e nt of th e list of s e rvic e provid e rs stor e d in th e s e cond data storag e m e chanism . 

3. (Canceled) 

4. (Previously Presented) The method of claim 1, wherein the second data 
storage mechanism is a memory chip embedded in the mobile device. 

5. (Previously Presented) The method of claim 1 , wherein the second data 
storage mechanism is an identity module removably insertable in the mobile device. 

6. (Previously Presented) The method of claim 1 , wherein the second data 
storage mechanism is a SIM card for the mobile device. 

7. (Canceled) 



wh e r e in th e cont e nt of th e list of s e rvic e provid e rs is e ditabl e by 



-ef-the 




3 



8. (Currently Amended) The method of claim 1, wherein the unique 
identification number identifier is at least one of the mobile device's electronic serial 
number (ESN), international mobile equipment identity (IMEI) or a phone number. 



9-15 (Canceled) 

16. (Currently Amended) A system configured to secure communications 
between a service provider and a mobile device in a mobile communications network, the 
system comprising: 

a receiver configured to: 

receive a request from the mobile device to provide a unique security key; 

and 

receive a request from the service provider to provide the unique security 
key, wherein the service provider requests the unique security key in order to 
establish a secure communication session with the mobile device; 

a processor configured to: 

generate a unique security key, in response to receiving the request from 
the mobile device; and 

store the unique security key in association with an identifier of the mobile 
device in a first data storage mechanism in the server system; 

a transmitter configured to: 

provide the unique security key to the mobile device, wherein the mobile 
device stores the unique security key in a second data storage mechanism in the 
mobile device; and 

provide the unique security key to the service provider, in response to 
determining that the service provider is included in a list of approved service 
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providers, wherein the list of approved service providers is updatable by the 
mobile device, and wherein the secure communication session is established 
between the service provider and the mobile device, in response to the service 
provider presenting the unique security key to the mobile device for 
authentication. 

A s e cur e d communication syst e m for a mobil e communications n e twork, th e 
system comprising: 

a logic unit for r e c e iving a r e qu e st to provid e a s e curity k e y to a mobil e d e vic e 
conn e ct e d to th e mobil e communications network; 

a logic unit for generating a unique security key for the requesting mobile device 
in r e spons e to r e c e iving a uniqu e id e ntification numb e r from th e mobil e d e vic e ; 

a logic unit storing the unique security key in a first data storage mechanism in 
association with the unique identification number identifying the mobile device, 

wh e r e in th e first data storag e m e chanism is acc e ssibl e to a s e rv e r syst e m 
connected to th e mobil e device over a wide ar e a communicatoin n e twork and wh e r e in th e 
first data storag e m e chanism is not dir e ctly acc e ssibl e by th e mobil e d e vic e ; 

a logic unit for r e c e iving a r e qu e st to provid e th e uniqu e s e curity k e y for th e 
mobile device to a service provider such that the service provider can provide a service to 
th e mobil e d e vic e bas e d on th e uniqu e s e curity k e y; and 

a logic unit for approving th e r e qu e st to provid e th e uniqu e s e curity k e y to th e 
service provider based on content of a list of service providers stored in a second data 
storag e m e chanism, 

wh e r e in th e s e cond data storag e m e chanism is dir e ctly acc e ssibl e by th e mobil e 

wh e r e in th e cont e nt of th e list of s e rvic e provid e rs is e ditabl e by a us e r of th e 
mobile device by way of directly accessing the second data storage mechanism via the 
mobile device. 
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17. (Currently Amended) The system of claim 16, wherein the list of approved 
service providers is stored in at least one of the first and second data storage 
mechanisms furth e r comprising: 




denying the request to provide the unique security key, if the service provider is 
not approv e d to r e c e iv e th e uniqu e s e curity k e y for th e mobil e d e vic e according to th e 
cont e nt of th e list of s e rvic e provid e rs stor e d in th e s e cond data storag e m e chanism . 

18. (Previously Presented) The system of claim 16, wherein the second data 
storage mechanism is a memory chip embedded in the mobile device. 

19. (Previously Presented) The system of claim 16, wherein the second data 
storage mechanism is an identity module removably insertable in the mobile device. 

20. (Previously Presented) The system of claim 16, wherein the second data 
storage mechanism is a SIM card for the mobile device. 

21. (New) The system of claim 16, wherein the identifier is at least one of the 
mobile device's electronic serial number (ESN), international mobile equipment identity 
(IMEI), or phone number. 
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